Job Abstract

Job ID

2024-11110

Category

Audit/Risk Management

Position Type

Full-Time

The Senior Business Continuity Analyst role is a very senior role that has a true sense of urgency, results driven, and detailed oriented that will provide East West Bank with an in-depth knowledge and experience of industry best practices in business continuity management, crisis management, disaster recovery, and emergency preparedness to help the enterprise achieve operational resiliency this year. This senior role spans the entire enterprise from the branch bank to every business function globally. This role will help protect the people, processes, and technology of the bank.

This role may be located either in Dallas, Texas or Los Angeles metropolitan area, California.

• Understand and solve preparedness problems to achieve operational resilience across the enterprise.
• Conduct threat analysis and risk assessment of all business functions across enterprise.
• Conduct interviews for Business Impact Analysis (BIA) to develop Business Continuity Plans
• Develop and facilitate exercising the BCPs.
• Conduct and facilitate trainings sessions concerning business continuity, crisis management, and emergency action plans such as fire evacuation and Shelter in Place.
• Develop and facilitate role-based scenario tabletop exercises focused on current risks and emerging threats.
• Conduct risk assessments and verification of evidence of successful BCP tests involving Third-Party vendors, suppliers, and service providers.
• Lead crisis management during disruptive events for the enterprise.
• Ability and dedication to work nights and weekends during a disruptive event to lead Crisis Management.
• Collaborate with IT Infrastructure to understand the requirements of developing Disaster Recovery Plans.
• Facilitate DR Tests, manage the DR testing schedule and applications in scope.
• Follow up and track required corrective actions after each DR Test to include generating an After Action Report.
• Evaluate current third party/vendor-hosted DR test strategies.
• Develop effective metrics from both a KPI and KRI perspective.

• 12+ years of demonstrated experience in Business Continuity Management solving preparedness problems.
• Experience with conducting interviews for Business Impact Analysis (BIA) and Business Continuity Plans.
• Experience with Business Continuity and Operational Resiliency applications such as Castellan / Riskonnect, Fusion Risk Management, Everbridge, Archer Resilience Management, and InfiniteBlue BC in the Cloud
• Experience conducting and facilitating trainings sessions concerning business continuity, crisis management, and emergency action plans such as fire evacuation and Shelter in Place.
• Experience creating and facilitating role-based scenario tabletop exercises focused on emerging threats.
• Experience in Incident Response systems e.g. Jira Service Management, ServiceNow, and Cherwell ITSM.
• Experience with conducting risk assessments and verification of evidence of successful BCP tests involving Third-Party vendors, suppliers, and service providers.
• 10+ years of demonstrated experience in Crisis Management managing disruptive events for the enterprise.
• 10+ years of demonstrated experience in Life Safety and Emergency Management.
• Experience with Threat Intelligence and Mass Notification systems e.g. OnSolve and AlertMedia
• Experience in managing a coordinated crisis response between Public & Private Sectors using aspects of FEMA Incident Command Systems (ICS) and NIMS methodologies.
• Demonstrated presentation skills.
• Ability and dedication to work nights and weekends during a disruptive event to lead Crisis Management.
• 10+ years of demonstrated experience in Disaster Response & Recovery
• Experience with IT Infrastructure to understand the requirements of developing Disaster Recovery Plans.
• Experience in facilitating DR Tests, managing a DR testing schedule and knowledge of RTO, RPO, MAD.
• Experience with documenting issues and tracking corrective actions to include generating an After Action Report.
• Experience with DR testing strategy for cloud-based applications.
• Experience with evaluating current third party/vendor-hosted DR test strategies.
• Experience with developing effective metrics from both a KPI and KRI perspective.
• Experience with Change Management process and how it relates to Disaster Recovery.

Required Education and Certifications

• Undergraduate degree in Business or Science or Emergency Management or IT related.
• Certifications = CBCP and MBCI.

Required Working Knowledge of Standards and Methodologies

• FFIEC IT Examination Handbook, “Business Continuity Management (BCM), November 2019”
• ISO 22301:2019 Security and Resilience - Business Continuity Management Systems
• NFPA 1600 - 2019 Standard on Continuity, Emergency, and Crisis Management
• NFPA 1660 – 2024 Standard for Emergency, Continuity, and Crisis Management: Preparedness, Response, and Recovery
• ISO 27031 management system for IT readiness for business continuity (IRBC).
• NIST SP 800-34 Rev.1 Contingency Planning Guide for Information Systems, 2010

Preferred Experience, Education, and Certifications

• Extensive experience within the Financial Services Critical Infrastructure Sector
• Experience with the “Public Private Partnership Program” involving local, county, and state public safety.
• Experience with public speaking at various national Continuity and Crisis conferences.
• Experience developing and managing responses to internal, external, and regulatory audits.
• Master’s degree in either Business Continuity or Disaster Management or Emergency Management
• Certifications = CBCI, CBRM, BCRP, MBCP, BCCE